Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability

Apple has backported fixes for a recently disclosed critical security flaw affecting older devices, citing evidence of active exploitation. The issue, tracked as CVE-2022-42856, is a type confusion vulnerability in the WebKit browser engine that could result in arbitrary code execution when...

PT-2022-7578 · Apple +7 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 16.2 iPadOS versions prior to 16.2 watchOS versions prior to 9.2 WebKitGTK affected versions not specified WPE WebKit affecte...

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to access confidential data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

Apple macOS Monterey Safari 缓冲区错误漏洞

WebKit is the engine for Safari and other browsers on iOS and iPadOS. The Apple WebKit out-of-bounds write vulnerability can be exploited by an attacker to execute arbitrary code by tricking a user into visiting a specially crafted website...

PT-2022-7582 · Apple +7 · Macos Ventura +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.1 tvOS versions prior to 16.1 macOS Ventura versions prior to 13 watchOS versions prior to 9.1 iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue is related to incorrect restriction of...

cc.co.scala-reactive:reactive-web_2.8.1 (=0.1), com.fmpwizard:lift-named-comet_2.8.1 (=0.3) +32 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (>=2.2 <=2.4-RC1)

net.liftweb:lift-webkit2.8.1 MAVEN version =2.2, =1.0.6, =0.0.3, =0.0.3, =2.2-RC1, =2.2-RC1, =2.2-RC1, =2.2-RC1, =2.2, =2.2-RC1, =2.2, =2.2-RC1, =2.2-RC1, =2.2-RC5 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

PT-2022-2641 · Apple +8 · Macos Monterey +17

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS Monterey versions prior to 12.4 Apple iTunes for Window...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in WebKit before Apple iOS 15.4 and iPadOS 15.4, which stems from the fact that processing...

VulnCheck KEV: CVE-2022-22620

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on...

Apple多款产品安全特征问题漏洞

Apple tvOS and others are products of Apple Inc.Apple tvOS is an operating system for smart TVs.Apple watchOS is an operating system for smart watches.Apple iPadOS is an operating system for iPad tablets. A vulnerability exists in various Apple products due to a security signature issue, which...

The vulnerability of the WebKit rendering module, related to memory usage after deallocation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebKit page rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Authentication flaw

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

The vulnerability of the WebKit component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted website...

VulnCheck KEV: CVE-2021-30858

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS WebKit, which could lead to arbitrary code execution when...

Apple iOS 和 iPadOS 资源管理错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerability is caused by a resource management error in Apple iOS and iPadOS WebKit. A resource management error...

Apple macOS Big Sur 资源管理错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a resource management error vulnerability that stems from a resource management error when WebKit processes HTML content. A remote attacker can exploit the vulnerability by creating a special...

CVE-2021-21775

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked in...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using malicious web content...

The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content...